fix(pkg/policies/opa/rego/azure/azurerm_container_registry/containerr…

…egistryresourcelock.rego): check correct fields (#858)

check that the azurerm_management_lock has the correct scope by
checking that is scoped to the correct terraform resource id.

Signed-off-by: maxgio92 <massimiliano.giovagnoli.1992@gmail.com>

pkg/policies/opa/rego/azure/azurerm_container_registry/containerRegistryResourceLock.rego

@@ -26,4 +26,9 @@ resourceLockExist(registry, registry_input) = exists {
     registry_name := sprintf("azurerm_container_registry.%s", [registry.name])
 	resource_lock_exist_set[registry_name]
     exists = true
-}
+} else = exists {
+  # hcl inspection
+    resource_lock_exist_set := { resource_lock_id | resource_lock_id := split(input.azurerm_management_lock[i].config.scope, ".")[1] }
+    resource_lock_exist_set[registry.name]
+    exists = true
+}